ADSchemaAnalyzer

  • Article

Applies To: Windows Server 2003 R2

ADSchemaAnalyzer

You can use ADSchemaAnalyzer to help migrate the Active Directory schema to ADAM. To start ADSchemaAnalyzer, click Start, point to All Programs, point to ADAM, click ADAM Tools Command Prompt, and then at the command prompt type: adschemaanalyzer.

The following sections describe commands on the ADSchemaAnalyzer menus:

  • File

  • Schema

  • Tools

File

The following table describes commands on the File menu.

Command Description

Load target schema

Opens a dialog box that you can use to authenticate to a specified Lightweight Directory Access Protocol (LDAP) server. Type a user name and password of an account that has permissions to the LDAP server. If you do a simple bind with an empty password, you are connected with anonymous credentials. Select the server type to load the target schema from. To select an LDAP Data Interchange Format (LDIF) file to load, click Load LDIF.

Load base schema

Opens a dialog box that you can use to authenticate to a specified LDAP server. Type a user name and password of an account that has permissions to the LDAP server. If you do a simple bind with an empty password, you are connected with anonymous credentials. Select the server type to load the base schema from. To select an LDIF file to load, click Load LDIF.

Create LDIF file

Produces an LDIF file that contains all selected schema elements.

Schema

The following table describes commands on the Schema menu.

Command Description

Hide present elements

Hides all elements that are present on the target server.

Show present elements

Shows all elements that are present on the target server.

Mark all non-present elements as included

Marks all elements that are not present on the target server as included for export.

Tools

The following table describes commands on the Tools menu.

Options

Opens a dialog box that you can use to set options for ADSchemaAnalyzer. The following table describes options on the tabs in the Options dialog box.

Tab Description

Dependencies graph

The following are the options on the Dependencies graph tab.

  • AttributeSecurityGUID (attribute to propset reference) - Select this option to display attributes that belong to a propset.

  • AppliesTo (propset to class reference) - Select this option to display classes that reference a given attribute or class.

  • Show Dependents node - Select this option to show the Dependents node in the tree for each element.

LDIF generation

The following are the options on the LDIF generation tab.

  • Don't update present elements - Use this option if you do not want to update present elements in the LDIF file.

  • Update with references to new elements only - Use this option to update the LDIF file with references to new elements.

  • Update with references to new and present elements - Use this option to update the LDIF file with references to new and present elements.

  • Allowed to write systemPossSureriors and systemAuxClasses as possSuperiors and auxClasses, if schema circular dependencies exist - Use this option if there are schema circular dependencies and you want to import the schema by writing systemPossSuperiors as possSuperiors and systemAuxClasses as auxClasses.

Miscellaneous

The following are the options on the Miscellaneous tab.

  • Marking an element as present marks all its subelements as present - Select this option to mark all subelements as present automatically when you mark an element as present in the tree.

  • Debug output - Select this option to debug the output of the LDIF file.

Right-click schema elements in the tree to mark them as Auto, Included, Excluded, or Present:

  • Auto automatically marks an element as included or excluded in the export. If an element is marked as Auto (included), you can right-click that element and then click Why auto included? to see the reverse dependency tree for the element.

  • Included marks the element so that it is included in the export. ADSchemaAnalyzer marks all related elements, such as superclasses, aux classes, must/may contains, defaultObjectCategory, and possSuperiors. ADSchemaAnalyzer includes propsets for included attributes and back-links for links.

  • Excluded marks the element so that it is not included in the export. You can block certain paths in the dependency graph. For example, you might want to import domainDns, but not samAccountDomain (which is an auxClass of domainDns). You can exclude a complete element, such as the samAccountDomain class, or you can exclude a relationship; for example, you can remove the auxClass reference from the domainDns class. If you exclude a relationship, any other classes that reference that element continue to include it.

  • Present means that the element is present on the target server. By default, the top class is marked as present.